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Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1 )[S Responsive to communication(s) filed on 24 August 2001 . 
2a)n This action is FINAL. 2b)H This action is non-final. 

3) n Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex pa/te Quayle, 1935 CD. 11, 453 O.G. 213. 
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5) n Claim(s) is/are allowed. 

Q)M Claim(s) 7i23 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) n Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 0 The specification is objected to by the Examiner. 

10)0 The drawing(s) filed on is/are: aO accepted or b)n objected to by the Examiner 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the comectlon is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 !)□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or fomri PTO-152. 

Priority under 35 U.S.C. § 119 

12)0 Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (0. 
a)n All b)n Some * 0)0 None of: 

1 .□ Certified copies of the priority documents have been received. 

2. n Certified copies of the priority documents have been received in Application No. . 

3. n Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
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DETAILED ACTION 



1 . This action is in response to the communication filed on August 24, 2001 . 
Claims 1 - 23 were received for consideration. No preliminary amendments for the 
claims were filed. Claims 1 - 23 are currently being considered. 



2. Dated and initialed copies of Applicant's IDS form 1449, Paper No. 6 and No. 7, 

are attached to this Office action. 



3. Claims 1 - 13 are objected to because of the following informalities: Every 
preamble should be followed by a semi-colon denoting the start of the limitations. 
Appropriate correction is required. 

4. Claim 12 is objected to because of the following informalities: "an asymmetric 
key algorithm" is repeated two times in the list, and one of the occurrences should be 
deleted. 



Information Disclosure Statement 



Claim Objections 



Claim Rejections - 35 USC §112 
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The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 



5. Claim 5 is rejected under 35 U.S.C. 112, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter which applicant 
regards as the invention. The claim states that the number generator is selected from a 
group, but does not delineate which group making the claim indefinite. 



Claim Rejections - 35 USC § 102 



The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351 (a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

6. Claims 1 - 23 are rejected under 35 U.S.C. 102(e) as being anticipated by Lirov 
et al. (U.S. Patent 6,785,810). 



Regarding claim 1 , Lirov discloses: 

A system for securely storing medical data, comprising: 
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an input process allowing an individual to enter identity information and medical 
data to associate with the identity information (column 4 line 62 - column 5 line 3, 
column 9 line 62 - column 10 line 4); 

an encryption key process for providing to each individual an encryption key for 
encrypting medical data associated with the individual (column 5 line 4 - column 6 line 
38); and 

a data table generator for storing medical data including encrypted medical data, 
in a table, whereby stored medical data from different individuals may be encrypted with 
different encryption keys (Figure la item 105, column 5 lines 53 -column 6 line 11). 

Regarding claim 13, Lirov discloses: 

A system for storing medical data, comprising: 

an input process for allowing an individual to enter identity information and 
medical data to associate with the identity information (column 4 line 62 - column 5 line 
3, column 9 line 62 - column 10 line 4); 

a private identity generator for generating independent of the identity information 
(column 5 line 4 - column 6 line 38); 

a unique private identity for the individual (column 5 line 4 - column 6 line 38); 

an encryption key process for providing to the individual a respective encryption 
key for encrypting the medical data of the individual (column 5 line 4 - column 6 line 
38): 
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a relational link generator for providing relational links for the medical data and 
the encryption key associated with the individual, whereby the medical data and 
encryption key can be stored in a table of a relational database (Figure la item 105, 
column 5 lines 53 - column 6 line 1 1 ). 

Regarding claim 18, Lirov discloses: 

A process for controlling access to medical data, comprising: 

allowing an individual to provide medical data and identity information (column 4 
line 62 - column 5 line 3, column 9 line 62 - column 10 line 4); 

providing the individual with a private identity and storing the medical data and 
identity information in tables of a relational database employing the private identity to 
provide a relational link to the medical and identity data (Figure la item 105, column 5 
line 4 - column 6 line 38); 

employing the private identity to create an encryption key for the respective 
individual (column 5 line 4 - column 6 line 38); and 

encrypting, as a function of the encrypting key, medical data associated with the 
individual, whereby medical data of different individuals are encrypted with different 
respective encryption keys (column 5 line 4 - column 6 line 38). 

Claim 2 is rejected as applied above in rejecting claim 1 . Furthermore, Lirov discloses: 

A system according to claim 1 , further comprising a key table generator for 
storing the encryption key in a key table (Figure la item 115, column 5 lines 4 - 33). 
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Claim 3 is rejected as applied above in rejecting claim 1 . Furthermore, Lirov discloses: 

A system according to claim 1, wherein the input process includes a private 
identity generator for generating for an individual a unique private identity being 
generated independently of the identity information (column 5 line 4 - column 6 line 38). 

Claim 14 is rejected as applied above in rejecting claim 13. Furthermore, Lirov 
discloses: 

A system according to claim 13, wherein the relational link generator includes an 
encryption process for encrypting a relational link for accessing medical and/or the 
encryption key (column 5 lines 4-6, column 6 lines 12 - 27). 

Claim 15 is rejected as applied above in rejecting claim 13. Furthermore, Lirov 
discloses: 

A system according to claim 13, wherein the relational link generator includes a 
hash process for generating a relational link as a hash function of the private identity 
(column 5 lines 27 - 33, column 5 lines 12 - 27). 

Claim 16 is rejected as applied above in rejecting claim 13. Furthermore, Lirov 
discloses: 
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A system according to claim 13, wherein the private identity generator includes a 
random number generator for generating the private identity as a function of a random 
number (column 5 line 4 - column 6 line 38). 

Claim 19 is rejected as applied above in rejecting claim 18. Furthermore, Lirov 
discloses: 

A process according to claim 18, further comprising: 
allowing a medical professional to search the relational database to identify 
medical data of interest. (column 6 lines 18-38, column 7 lines 54 - 65). 

Claim 20 is rejected as applied above in rejecting claim 18. Furthermore, Lirov 
discloses: 

A process according to claim 18, further comprising: 

allowing a medical professional to request identity information associated with 
medical data in the relational data base, and employing the private identity to notify the 
respective individual of the request (column 6 lines 18-38, column 7 lines 54 - 65). 

Claim 21 is rejected as applied above in rejecting claim 18. Furthermore, Lirov 
discloses: 

A process according to claim 18, further comprising: 
allowing the individual to control access to the medical data of the individual 
(Table 1 , column 4 lines 10-21). 
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Claim 22 is rejected as applied above in rejecting claim 18. Furthermore, Lirov 
discloses: 

A process according to claim 18, further comprising: 
allowing the individual to store portions of the medical data in the clear and 
portions in an encrypted form (column 4 line 62 - column 5 line 3). 

Claim 4 is rejected as applied above in rejecting claim 3, Furthermore, Lirov discloses: 
A system according to claim 3, wherein the private identity generator includes a 
random number generator for generating a random number for the private identity 
(column 5 line 4 - column 6 line 38). 

Claim 5 is rejected as applied above in rejecting claim 3. Furthermore, Lirov discloses: 
A system according to claim 3, wherein the random number generator is selected 
from the group (column 5 line 4 - column 6 line 38). 

Claim 6 is rejected as applied above in rejecting claim 3. Furthermore, Lirov discloses: 
A system according to claim 3, further including: 

means for employing the private identity as a relational link key for relating 
medical data associated with the individual to the encryption key associated with the 
individual (column 5 lines 4-6, column 6 lines 12 - 27). 
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Claim 7 is rejected as applied above in rejecting claim 3. Furthermore, Lirov discloses: 
A system according to claim 3, wherein the encryption key process includes: 
a process for generating the encryption key as a function of the private identity 

(column 5 line 4 - column 6 line 38), 

Claim 8 is rejected as applied above in rejecting claim 3. Furthermore, Lirov discloses: 
A system according to claim 3 wherein the encryption key process includes: 
a process for generating the encryption key as an asymmetric function of the 

private identity (column 5 line 4 - column 6 line 38). 

Claim 9 is rejected as applied above in rejecting claim 3. Furthermore, Lirov discloses: 
A system according to claim 3 wherein the encryption key process includes: 
a process for generating the encryption key as a symmetric function of the 

private identity (column 5 line 4 - column 6 line 38). 

Claim 10 is rejected as applied above in rejecting claim 2. Furthermore, Lirov discloses: 
A system according to claim 2, further including: 

a table encryption process for encrypting the key table to secure the encryption 
key stored therein (column 5 lines 4-13). 

Claim 1 1 is rejected as applied above in rejecting claim 3. Furthermore, Lirov discloses: 
A system according to claim 3, further comprising: 
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a relational link generator for processing the private identity to generate a 
relational link for associating medical data in the data table with a respective private 
identity (column 5 lines 4-6, column 6 lines 12 - 27). 

Claim 12 is rejected as applied above in rejecting claim 1 1 . Furthermore, Lirov 
discloses: 

A system according to claim 1 1 , wherein the relational link generator includes a 
process for processing the private identity selected from the group consisting of a 
symmetric key algorithm, an asymmetric key algorithm, an asymmetric key algorithm, 
and a hash algorithm (column 5 line 4 - column 6 line 38). 

Claim 17 is rejected as applied above in rejecting claim 16. Furthermore, Lirov 
discloses: 

A system according to claim 16, wherein the relational link generator includes a 
process for encrypting the private identity to provide an encrypted relational link (column 
5 lines 4 -13). 

Claim 23 is rejected as applied above in rejecting claim 22. Furthermore, Lirov 
discloses: 

A process according to claim 22, comprising: 

allowing a medical professional to search the relational database (Table 1, 
column 4 lines 10-21, column 6 lines 18-38, column 7 lines 54-65). 
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Conclusion 



7. Any inquiry concerning this communication or earlier communications from ttie 
examiner should be directed to Kaveh Abrishamkar whose telephone number is 703- 
305-8892. The examiner can normally be reached on Monday thru Friday 8-5. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 703-305-9648. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status Information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on'access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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